NetSight
IP …
high7.5

CVE-2005-3906

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attacker…

Impact

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

Affected products

VendorProductAffected versions
SunJdk
Versions 1.3, 1.3.0_02, 1.3.0_05, 1.3.1_01, 1.3.1_01a, 1.3.1_02
SunJre
Versions 1.3.0, 1.3.1, 1.4.1, 1.4.2, 1.4.2_1, 1.4.2_2

References